Xymon Mailing List Archive search

HTTPS tests fails when TLS 1.1 and 1.2 only is enabled

list Gab Dito
Tue, 14 Apr 2015 11:41:15 -0400
Message-Id: <CAO=user-040649a42e30@xymon.invalid>

oh, I run yum update all the times, and openssl is still 0.9.8e-33.el5_11


Gab

On Tue, Apr 14, 2015 at 11:00 AM, Mark Felder <user-db141d317836@xymon.invalid> wrote:
On Tue, Apr 14, 2015, at 09:01, Dito wrote:
that's exactly what we did, disabled TLS1.0 as well and SSL, HTTPST is
only
TLS1.0
we'll disabled TLS1.1 soon as well... in the name of security :)

I am thinking maybe an OpenSSL script could work in the meanwhile,
instead
of breaking things...

I enabled SSL cipher logging in my nginx webserver. It does appear to
use the best cipher available by default (TLS 1.2). I now strongly
suspect the OpenSSL on your Xymon server doesn't speak TLS 1.1 or 1.2.
Can you provide the OpenSSL version?

example:

% openssl version
OpenSSL 1.0.1l-freebsd 15 Jan 2015